Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5PRKEPB49LFReckQ4H9mccGzhZgGB5rAvVyrL46WYfQh/0/323830343a356264633a383030333a3a2f34382d3438203d3e20323638383733.roa
File:                     323830343a356264633a383030333a3a2f34382d3438203d3e20323638383733.roa (raw, json)
Hash identifier:          RHE+0vBhYY0OoYbzdq3DrGSg3+teNV4m5JaJiIRR3Po=
Subject key identifier:   01:FA:A0:E5:FE:91:3C:CD:1A:E5:EB:4C:CB:F1:A8:FD:A8:6D:8A:06
Certificate issuer:       /CN=47B9F8F78ED6BC6609A0FD18948FDA84FF697CB2
Certificate serial:       4D22CAEC2D029A37F22B765B070F55A6F4FB4C
Authority key identifier: 47:B9:F8:F7:8E:D6:BC:66:09:A0:FD:18:94:8F:DA:84:FF:69:7C:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/47B9F8F78ED6BC6609A0FD18948FDA84FF697CB2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5PRKEPB49LFReckQ4H9mccGzhZgGB5rAvVyrL46WYfQh/0/323830343a356264633a383030333a3a2f34382d3438203d3e20323638383733.roa
Signing time:             Tue 17 Jan 2023 12:23:41 +0000
ROA not before:           Tue 17 Jan 2023 12:18:41 +0000
ROA not after:            Tue 16 Jan 2024 12:23:41 +0000
asID:                     268873
IP address blocks:        2804:5bdc:8003::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:22:ca:ec:2d:02:9a:37:f2:2b:76:5b:07:0f:55:a6:f4:fb:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47B9F8F78ED6BC6609A0FD18948FDA84FF697CB2
        Validity
            Not Before: Jan 17 12:18:41 2023 GMT
            Not After : Jan 16 12:23:41 2024 GMT
        Subject: CN=01FAA0E5FE913CCD1AE5EB4CCBF1A8FDA86D8A06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:3c:2c:02:1b:1f:ca:ad:08:99:b7:23:cc:bf:
                    e5:7c:31:73:08:ed:27:e2:4b:91:16:42:40:84:12:
                    2a:e4:e2:c2:8b:8d:6f:7c:47:cc:bb:b3:84:79:5a:
                    6d:b1:c2:6c:52:d6:bf:36:88:9d:25:28:49:c8:20:
                    df:3b:19:12:c8:16:c4:02:ce:11:42:52:21:f7:a6:
                    ae:72:57:85:85:1a:c9:dd:d7:93:1f:57:97:34:ff:
                    bf:30:b6:2c:77:74:8f:3b:b4:66:46:eb:7d:37:c1:
                    8d:36:0c:f0:8f:7a:ff:94:2d:ea:19:a2:c6:2c:c6:
                    0c:18:e6:9c:1f:bf:56:4c:4a:b7:f3:4e:b9:9e:bf:
                    fb:b3:55:9e:31:24:95:11:7d:d5:2d:00:e1:d8:04:
                    e9:f2:12:8d:fd:6b:33:27:e5:87:89:ba:1f:6c:36:
                    e0:b3:60:e2:bd:33:f8:0c:da:7b:4b:3a:64:26:69:
                    ca:f2:e0:b6:bb:dc:e3:02:59:d9:a6:83:61:e9:39:
                    5d:7f:c8:c2:b2:1e:07:7c:41:f7:66:68:d7:86:56:
                    84:a0:de:54:1e:12:eb:d0:08:e6:da:5d:43:a3:62:
                    1b:59:e5:a5:41:13:9c:b5:22:8e:e1:19:01:5b:f2:
                    48:0b:f2:ca:83:43:62:1e:15:4a:af:a5:ad:46:4b:
                    34:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:FA:A0:E5:FE:91:3C:CD:1A:E5:EB:4C:CB:F1:A8:FD:A8:6D:8A:06
            X509v3 Authority Key Identifier:
                keyid:47:B9:F8:F7:8E:D6:BC:66:09:A0:FD:18:94:8F:DA:84:FF:69:7C:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5PRKEPB49LFReckQ4H9mccGzhZgGB5rAvVyrL46WYfQh/0/47B9F8F78ED6BC6609A0FD18948FDA84FF697CB2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/47B9F8F78ED6BC6609A0FD18948FDA84FF697CB2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5PRKEPB49LFReckQ4H9mccGzhZgGB5rAvVyrL46WYfQh/0/323830343a356264633a383030333a3a2f34382d3438203d3e20323638383733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5bdc:8003::/48

    Signature Algorithm: sha256WithRSAEncryption
         b0:03:bc:4a:91:fb:f6:ba:c7:39:12:40:4c:01:a0:52:1c:61:
         13:c2:af:52:62:e0:be:51:0e:f2:93:30:91:ed:ff:8e:21:02:
         de:b8:57:14:43:d3:96:3f:78:95:57:00:07:4d:65:4e:5b:72:
         5b:a3:13:52:7c:88:7e:0f:80:e1:d4:18:13:bb:2a:a2:bf:eb:
         7e:5d:da:b5:59:b7:62:e7:6b:14:e2:d7:e1:6d:61:4f:f9:82:
         c6:e1:9b:74:43:9e:07:12:e4:e1:de:d0:d4:e1:65:ef:ef:d2:
         d3:65:e1:a3:c6:22:92:11:51:6d:cb:06:3f:aa:5c:6b:b7:56:
         e9:2b:73:e5:00:7d:0b:2e:6f:84:90:3f:2a:35:b0:5e:7a:5a:
         c7:81:9f:ec:3b:cf:43:72:ae:99:a0:d6:2e:61:8f:cd:d3:9f:
         25:4e:37:cb:83:a8:21:ce:21:89:b5:a4:00:b2:87:31:ca:b6:
         6a:dd:8f:9b:35:56:43:e7:d7:4e:53:c9:19:fc:28:1d:70:a0:
         03:0d:55:a2:c1:13:fe:59:65:cc:1a:d7:ef:a5:a9:19:e1:bc:
         29:2c:04:be:57:7d:bf:bc:14:7a:f4:48:c0:04:33:4e:45:d8:
         dc:f8:44:6c:74:41:2d:58:8e:be:a8:29:f4:7a:37:32:f4:ed:
         d3:f8:8d:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:39 2024 by rpki-client on console-fra.rpki-client.org